Re: rdr with no port?

["Eric Bullen" <eric@thedeepsky.com>]

> hello. yesterday i installed 3.0 with PF starring, and while playing
> with nat.conf i became curious. proto part to rdr rule isn't required,
> however port part is. could it be difficult to make it optional as
> well, so that the following rule could work
>
> rdr on fxp0 from any to xxx.xxx.xxx.xxx -> yyy.yyy.yyy.yyy

Take a look at binat (man 5 nat.conf). This will do just that, then you can
control what ports you want through within pf.conf (including icmp, or
whatever). The only problem is that machine y will go out to the net natted
as x for outbound traffic.

-E